webhost-11.deac.lv
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:58:ec:26:3d:f8:1c:89:c1:f2:aa:bd:a6:9d:db:86:aa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=webhost-11.deac.lv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:58:ec:26:3d:f8:1c:89:c1:f2:aa:bd:a6:9d:db:86:aaSerial Number (int): 312837693421671404374011291694489587648170
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:9a:4a:7f:36:74:ed:db:15:fd:61:94:55:18:be:c2:ff:e6:8e:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ed:9b:c4:1c:0e:48:7f:b2:28:d0:33:30:a6:9b:9f:05:a3:15:bd:86
Fingerprint (sha256): 79:77:68:d8:11:fe:9b:ed:90:6c:db:8a:cc:19:2d:35:50:2b:20:e5:3d:31:ce:b6:38:d5:d5:38:11:a6:f8:59
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate webhost-11.deac.lv
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webhost-11.deac.lv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webhost-11.deac.lv
Other certificates including the domain name deac.lv
(limited to 100 certificates)
mail.deac.lv
webhost-11.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
webhost-11.deac.lv
sirowaclinic.com
mail.deac.lv
sirowaclinic.com
*.deac.lv
sirowaclinic.com
mail.deac.lv
webhost-11.deac.lv
sirowaclinic.com
sirowaclinic.com
*.deac.lv
mail.deac.lv
webhost-11.deac.lv
exchange.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
exchange.deac.lv
mailhub.deac.lv
*.deac.lv
mailhub.deac.lv
docs.deac.lv
*.deac.lv
helpdesk.deac.lv
webhost-11.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
webhost-11.deac.lv
sirowaclinic.com
mail.deac.lv
sirowaclinic.com
*.deac.lv
sirowaclinic.com
mail.deac.lv
webhost-11.deac.lv
sirowaclinic.com
sirowaclinic.com
*.deac.lv
mail.deac.lv
webhost-11.deac.lv
exchange.deac.lv
*.deac.lv
*.deac.lv
*.deac.lv
exchange.deac.lv
mailhub.deac.lv
*.deac.lv
mailhub.deac.lv
docs.deac.lv
*.deac.lv
helpdesk.deac.lv
Certificate
The complete raw certificate details for webhost-11.deac.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISA5dY7CY9+ByJwfKqvaad24aqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMTMwODA1MDhaFw0x ODAyMTEwODA1MDhaMB0xGzAZBgNVBAMTEndlYmhvc3QtMTEuZGVhYy5sdjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM8MLq6gXmI9Mj9j3nxCWOw6BkJB iVstj8FzPcAFUaT58x8l64ZUzSnwzRsrvA5/8jz8fYaiE6tuLC+0peO5cTBzIQ3N 88sCwAJck72a9B/+mRT+KiGw5tsOqTaigketM+eJw/x2gKKf6h3hhmzCng7gMnde 98fR5XtiD7462CvV7DzXEY7dBX2DVYOkUqrEYR3ECaBu7iQWxzdVSEDVUoO7bRrE qCxoob2Yh02I4fMOEqJ+EB0QEvILHI8oghHY8Esmen8iQ1KJ8q7HmDY8yKZXQW5U ujX6JK4jGDwE9fF0WDKyMNayAq/N6EjeT/FyW7KN0lrDCAeC8Pu93sIyuv8CAwEA AaOCAhIwggIOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhppKfzZ07dsV/WGUVRi+ wv/mjgcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJ3ZWJob3N0LTExLmRlYWMubHYwgf4GA1UdIASB 9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlz IENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcg UGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmlj YXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBv c2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAMZ554te1xqeXkar+zmsqjJqM1N9V ALMgk9PgsUyM22ettRuKopf1SKO+X/UOfy9Yci1mgwu4i/kABxJegKVyfOIjDAnh EURNWaUQ+/bKcX4Iq7JRHH8U1hMWiQESstcz0Ig1YXqWAidk+IO1B2l854dvhFCM e9KzVlGxAFs4nYR0dLhITFzoWO5F5EGnOVRUD2RjUjgL5I4j05OVZxmZQMa0xLMk 438cv0/Fs+mG0eTAL1lUHCqCvkLz2wQN6CXry4vhbF9VcPcdzvC7tG7xUXvtA38a 5te7GarfR7ygCV4F3OGbeLpUw6ih/iuXMkYrMSBo9jTDw4NLkObOeWdjgQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwwurqBeYj0yP2PefEJY 7DoGQkGJWy2PwXM9wAVRpPnzHyXrhlTNKfDNGyu8Dn/yPPx9hqITq24sL7Sl47lx MHMhDc3zywLAAlyTvZr0H/6ZFP4qIbDm2w6pNqKCR60z54nD/HaAop/qHeGGbMKe DuAyd173x9Hle2IPvjrYK9XsPNcRjt0FfYNVg6RSqsRhHcQJoG7uJBbHN1VIQNVS g7ttGsSoLGihvZiHTYjh8w4Son4QHRAS8gscjyiCEdjwSyZ6fyJDUonyrseYNjzI pldBblS6NfokriMYPAT18XRYMrIw1rICr83oSN5P8XJbso3SWsMIB4Lw+73ewjK6 /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312837693421671404374011291694489587648170 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 08:05:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-11 08:05:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webhost-11.deac.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26137336469685426987734309668035455208910581317578969210822353930803296742959834429617969887230147190362704170266750528554768935621210449900552170009893880901593824663127745406754306039725896496856970095485869547801010872263821656249792391454960886156521999124645112315603302773983336272147643951157690287479519654238414800976113643834290293756497927577782920363699817399482322931215246654361526562692142856282870846909317446710334956717193861682947434232896649787976615302092486827154524495848564788614784233325628612295958015416154987299151132713712513885635266141509545988591792182999836405562558400690435854088959 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 869a4a7f3674eddb15fd61945518bec2ffe68e07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhost-11.deac.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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